a19c80e69bba9546e5bfca449cac5576b2c9432c67b7699671d3f38974eddb80 | Triage

Analysis

max time kernel
70s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
22/09/2022, 07:09

Sharing

Report Analysis Logs

General

Target

a19c80e69bba9546e5bfca449cac5576b2c9432c67b7699671d3f38974eddb80.exe
Size

15.8MB
MD5

0697bae0111face00d6af6fd74f253d0
SHA1

c514a23be32f06ac68aa7d93f6cad8c7bad54663
SHA256

a19c80e69bba9546e5bfca449cac5576b2c9432c67b7699671d3f38974eddb80
SHA512

c36158599015dcb9fdd9f8a3a4cee6e59045a704453df8b962ae41c3b50378965abe9106011f35456be69ef2a5ccfc63afe9eb6fc2f72678835eb77b08ec4883
SSDEEP

196608:apeecImvRxfJuK0gfrxieiO0KcP+Cr5cB+Sb7pyXRl7K6pEF5Ulm:HlLvTfJtvf1ihOvcEBVdwSj2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a19c80e69bba9546e5bfca449cac5576b2c9432c67b7699671d3f38974eddb80.exe
"C:\Users\Admin\AppData\Local\Temp\a19c80e69bba9546e5bfca449cac5576b2c9432c67b7699671d3f38974eddb80.exe"
1⤵
PID:4676

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads